CVE-2022-31491

CVE-2022-31491 이 저장소에는 Metasploit 모듈과 PoC 파일이 포함되어 있습니다. 추가 정보 Voltronic Viewpower/Pro 및 리브랜드/파생 제품 UPS 관리 소프트웨어는 일반적으로 웹 인터페이스를 통해 적절히 인증 및 권한이 부여된 사용자가, 소프트웨어가 관리 중인 UPS의 종료를 감지할 때 사용자가 선택한 단일 OS 명령을 실행하도록 시스템을 구성할 수 있게 합니다. 예를 들어 일괄 작업batch job을 중지하거나 단일 명령으로 다른 시스템에 알림을 보내는 경우입니다. 관련된 중요한 기반...

CVE-2022-43110

CVE-2022-43110 詳細情報 Voltronic Viewpower/Pro およびそのリブランド/派生製品 このUPS管理ソフトウェアは、ウェブインターフェースを使用してシステムを設定できるのは、適切に認証・認可された管理者ユーザーのみであることを前提としています。 （CWE-425: Direct Request 'Forced...

EUVD-2022-54224

Malicious code in bioql PyPI...

CVE-2022-31491

Voltronic Power and PowerShield New Zealand products, specifically ViewPower through 1.04-24215 , ViewPower Pro through 2.0-22165 , and PowerShield Netguard before 1.04-23292 , are vulnerable to remote code execution. The flaw exists in a critical underlying function exposed over the network (CWE...

Exploit for CVE-2022-31491

CVE-2022-31491 Metasploit module and PoC are coming. Further...

CVE-2023-51593

Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

The vulnerability of the RMI interface in software for controlling power sources in Voltronic Power ViewPower Pro allows a intruder to execute arbitrary code.

The vulnerability of the RMI software interface for controlling power sources in Voltronic Power ViewPower Pro relates to the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using a specially created...

The vulnerability of the updateManagerPassword function in the software for managing power sources of Voltronic Power ViewPower Pro allows a intruder to bypass the authentication process and gain unauthorized access to the software.

The vulnerability of the updateManagerPassword function in the software for managing power sources of Voltronic Power ViewPower Pro is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to bypass the authentication...

The vulnerability of the SocketService module in the software for managing power sources of Voltronic Power ViewPower Pro allows a intruder to trigger a service failure.

The vulnerability of the SocketService module in the software for managing power sources of Voltronic Power ViewPower Pro is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure through a specially craft...